Re: check a certificate in CRL



The better option would be to build an X509Chain object and use the various options available on it to check the validity of the chain including revocation status. .NET doesn't offer any low level APIs to check a CRL directly, so you would need to p/invoke that type of thing in the cryptoAPI if you want to hit it at that low a level. It usually isn't a good idea to try to build this yourself though.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
"lobrys" <lobrys@xxxxxxxxx> wrote in message news:fdd325e7-18ce-430a-9b2f-f5ec0aee9246@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello

a security question :

I developp a C# application that use certificate. I must check
validity of these certificates...

how to see if a certificate is revoked in a CRL (revocation list) ?
how to open a CRL file in C#, or maybe using Windows DLL....?


Thanks by advance!
Syl

.



Relevant Pages

  • Re: Problem with IIS5 - "expired" CRLs not working?
    ... It appears that Win2K AS simply doesn't check the validity period of the ... CRL is expired. ... But, if IIS does NOT obey the CRL validity period, then I fear that our ...
    (microsoft.public.platformsdk.security)
  • Re: Problem with IIS5 - "expired" CRLs not working?
    ... It appears that Win2K AS simply doesn't check the validity period of the ... CRL is expired. ... But, if IIS does NOT obey the CRL validity period, then I fear that our ...
    (microsoft.public.inetserver.iis.security)
  • Re: Certificate revokation
    ... > Is there a way to revoke a certificate and that the revokation ... The revocation will be in effect when you issue the first CRL after ...
    (microsoft.public.windows.server.security)
  • Ca problems
    ... I have one offline root CA and one subordinate enterprise CA. ... I forgot to publish crl of root CA to my AD and now it expired and I cant start my subordinate ca:(Errors are: ... Revocation status for a certificate in the chain for CA certificate 2 for LB MSFT SUB CA could not be verified because a server is currently unavailable. ... The revocation function was unable to check revocation because the revocation server was offline. ...
    (microsoft.public.windows.server.security)
  • Re: CRL Checking....
    ... Windows when using SmartCards. ... There was no need for you to "deduce" this, ... post in search of a way of allowing KDC to use an expired CRL, ... I want to be able let KDC be lenient by accepting a CRLs validity beyond its ...
    (microsoft.public.security)

Quantcast